In the Claims 

1. (Currently amended) A method for prioritizing virus scan requests comprising: 

checking a virus scan request to determine if scanning an object of the request is 
necessary; and 

placing the virus scan request on a queue in a priority order based on a 
characteristic of the virus scan request , the characteristic including at least one of an 
identity of the user triggering the virus scan request, a type of the process accessing the 
object, a time stamp of when the virus scan request was received, and an indication of a 
network node accessing the object, wherein the virus scan request is prioritized based on 
at least one of the user identity being an administrator as compared to a regular user, the 
process type being an operating system as compared to a user application, the time stamp 
being earlier than the time stamps of each scan request previously placed on the queue, 
and the indication being that the object is accessed from a server console as compared to 
a network client . 

2. (Original) The method of claim 1, further comprising: 

selecting a one of the virus scan requests from the queue. 

3. (Original) The method of claim 2, wherein selecting is based on the priority order. 

4. (Original) The method of claim 2, wherein selecting is based on the characteristic of 
the virus scan request. 

5. (Original) The method of claim 2, further comprising: 

scanning the object of the selected virus scan request. 

6. (Cancelled) 
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7. (Original) The method of claim 1, wherein the priority order is further based on 
comparing the characteristic of the virus scan request with the characteristics of the virus 
scan requests previously placed on the queue. 

8. (Original) The method of claim 7, wherein the priority order is further based on a 
parameter indicating which of the compared characteristics is given higher priority. 

9. (Original) The method of claim 4, wherein selecting is further based on comparing the 
characteristics of the virus scan requests placed in the queue. 

10. (Original) The method of claim 9, wherein selecting is further based on comparing 
the characteristics of the virus scan requests placed in the queue with the characteristics 
of the previously selected virus scan requests whose objects are currently being scanned. 

11. (Original) The method of claim 10, wherein selecting is further based on a parameter 
indicating which of the compared characteristics is given higher priority. 

12-16. (Cancelled) 

17. (Original) The method of claim 1, wherein scanning is necessary when a virus scan 
status indicates the object is not known to be virus free. 

18. (Original) The method of claim 1, wherein scanning is necessary when the object of 
the virus scan request is in a directory not excluded from virus scanning. 

19. (Currently amended) An apparatus comprising: 

a machine-accessible medium having stored thereon executable instructions to 

cause a computer to perform 

checking a virus scan request to determine if scanning is necessary; and 
placing the virus scan request on a queue in a priority order based on a 

characteristic of the virus scan request , the characteristic including at least one of an 
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identity of the user triggering the virus scan request, a type of the process accessing the 
object, a time stamp of when the virus scan request was received, and an indication of a 
network node accessing the object, wherein the virus scan request is prioritized based on 
at least one of the user identity being an administrator as compared to a regular user, the 
process type being an operating system as compared to a user application, the time stamp 
being earlier than the time stamps of each scan request previously placed on the queue, 
and the indication being that the object is accessed from a server console as compared to 
a network client . 

20. (Original) The apparatus of claim 19, further comprising instructions for selecting a 
one of the virus scan requests from the queue. 

21. (Original) The apparatus of claim 20, wherein the instructions for selecting is based 
on the priority order. 

22. (Original) The apparatus of claim 20, wherein the instructions for selecting is based 
on the characteristic of the virus scan request. 

23. (Original) The apparatus of claim 20, further comprising instructions for scanning 
the object of the selected virus scan request. 

24. (Cancelled) 

25. (Original) The apparatus of claim 20, wherein the instructions for placing the virus 
scan request on the queue in the priority order are further based on comparing the 
characteristic of the virus scan request with the characteristics of the virus scan requests 
previously placed on the queue. 

26. (Original) The apparatus of claim 25, wherein the instructions for placing the virus 
scan request on the queue in the priority order are further based on a parameter indicating 
which of the compared characteristics is given higher priority. 
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27. (Original) The apparatus of claim 20, wherein the instructions for selecting are 
further based on comparing the characteristics of the virus scan requests placed in the 
queue. 

28. (Original) The apparatus of claim 27, wherein the instructions for selecting are 
further based on comparing the characteristics of the virus scan requests placed in the 
queue with the characteristics of the previously selected virus scan requests whose objects 
are currently being scanned. 

29. (Original) The apparatus of claim 27, wherein the instructions for selecting are 
further based on a parameter indicating which of the compared characteristics is given 
higher priority. 

30-34. (Cancelled) 

35. (Original) The apparatus of claim 19, wherein the instructions for checking to 
determine if scanning is necessary include determining when a virus scan status indicates 
the object is not known to be virus free. 

36. (Original) The apparatus of claim 19, wherein the instructions for checking to 
determine if scanning is necessary include determining when the object of the virus scan 
request is in a directory not excluded from virus scanning. 

37. (Currently amended) A virus scanner comprising: 

a pre-processor thread that checks a virus scan request to determine if scanning an 
object of the request is necessary; 

a queue that receives the virus scan request in a priority order based on a 
characteristics of the virus scan request , the characteristics including at least two of an 
identity of the user triggering the virus scan request, a type of the process accessing the 
object, a time stamp of when the virus scan request was received, and an indication of a 



09/823,438 



-5- 



002114.P016 



network node accessing the object, wherein the virus scan request is prioritized based on 
at least two of the user identity being an administrator as compared to a regular user, the 
process type being an operating system as compared to a user application, the time stamp 
being earlier than the time stamps of each scan request previously placed on the queue, 
and the indication being that the object is accessed from a server console as compared to 
a network client . 

38. (Original) The virus scanner of claim 37, further comprising: 

a scanner thread that selects a one of the virus scan requests from the queue. 

39. (Original) The virus scanner of claim 38, wherein the selection is based on the 
priority order. 

40. (Original) The virus scanner of claim 38, wherein the selection is based on the 
characteristic of the virus scan request. 

41. (Original) The virus scanner of claim 38, wherein the scanner thread further scans 
the object of the selected virus scan request. 

42. (Cancelled) 

43. (Original) The virus scanner of claim 37, wherein the priority order is further based 
on comparing the characteristic of the virus scan request with the characteristics of the 
virus scan requests previously placed on the queue. 

44. (Original) The virus scanner of claim 43, wherein the priority order is further based 
on a parameter indicating which of the compared characteristics is given higher priority. 

45. (Original) The virus scanner of claim 40, wherein the selection is further based on 
comparing the characteristics of the virus scan requests placed in the queue. 
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46. (Original) The virus scanner of claim 45, wherein the selection is further based on 
comparing the characteristics of the virus scan requests placed in the queue with the 
characteristics of the previously selected virus scan requests whose objects are currently 
being scanned. 

47. (Original) The virus scanner of claim 46, wherein the selection is further based on a 
parameter indicating which of the compared characteristics is given higher priority. 

48-52. (Cancelled) 

53. (Original) The virus scanner of claim 37, wherein determining that scanning is 
necessary includes determining when a virus scan status indicates the object is not known 
to be virus free. 

54. (Original) The virus scanner of claim 37, wherein determining that scanning is 
necessary includes determining when the object of the virus scan request is in a directory 
not excluded from virus scanning. 

55. (Currently amended) A computer system comprising: 

a processor coupled to a system bus; 

a memory coupled to the processor through the system bus; 

a machine-accessible medium coupled to the processor through the system bus; 

a virus scanning process executed from the machine-accessible medium by the 
processor, wherein the virus scanning process causes the processor to check a virus 
scanning request to determine if scanning an object of the request is necessary, and if so 
to further place the checked virus scan request on a queue in a priority order based on a 
characteristics of the virus scan request , the characteristics including each of an identity 
of the user triggering the virus scan request, a type of the process accessing the object, a 
time stamp of when the virus scan request was received, and an indication of a network 
node accessing the object, wherein the virus scan request is prioritized based on the user 
identity being an administrator as compared to a regular user, the process type being an 
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operating system as compared to a user application, the time stamp being earlier than the 
time stamps of each scan request previously placed on the queue, and the indication being 
that the object is accessed from a server console as compared to a network client . 

56. (Original) The computer system of claim 55, wherein the virus scanning process 
further causes the processor to select a one of the virus scan requests from the queue. 

57. (Original) The computer system of claim 56, wherein the selection is based on the 
priority order. 

58. (Original) The computer system of claim 56, wherein the selection is based on the 
characteristic of the virus scan request. 

59. (Original) The computer system of claim 56, wherein the virus scanning process 
further causes the processor to scan the object of the selected virus scan request. 

60. (Cancelled) 
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